Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2004
December

CVEs published in December 2004

1,341 vulnerabilities, 159 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

adobe acrobat readerBuffer overflow in the mailListIsPdf function in Adobe Acrobat Reader 5.09 for Unix allows remote...CVE-2004-115210.0 HighDecember 22, 2004
broadcom etrust ez antivirusComputer Associates eTrust EZ Antivirus 7.0.0 to 7.0.4, including 7.0.1.4, installs its files...CVE-2004-11497.2 HighDecember 22, 2004
vim development group vimVIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file...CVE-2004-1138Fix available7.2 HighDecember 22, 2004
kde, xpdf, easy software products cups +2 moreBuffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that...CVE-2004-1125Fix available9.3 HighDecember 22, 2004
php, openpkg, trustix secure linux +1 more +3 moreBuffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2...CVE-2004-1065EPSS 10.0%10.0 HighDecember 22, 2004
linux kernel, ubuntu linux +1 moreRace condition in Linux kernel 2.6 allows local users to read the environment variables of...CVE-2004-10581.2 LowDecember 22, 2004
linux kernel, ubuntu linux +1 moreDirect Rendering Manager (DRM) driver in Linux kernel 2.6 does not properly check the DMA lock,...CVE-2004-10566.4 MediumDecember 22, 2004
ibm aixUntrusted execution path vulnerability in invscout in IBM AIX 5.1.0, 5.2.0, and 5.3.0 allows...CVE-2004-1054Public exploit7.2 HighDecember 22, 2004
ibm aixUntrusted execution path vulnerability in chcod on AIX IBM 5.1.0, 5.2.0, and 5.3.0 allows local...CVE-2004-10287.2 HighDecember 22, 2004
php, openpkg, trustix secure linux +1 more +3 moreThe deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to...CVE-2004-101910.0 HighDecember 22, 2004
nfs nfs-utils, redhat enterprise linux, enterprise linux desktop +2 morerquotad in nfs-utils (rquota_server.c) before 1.0.6-r6 on 64-bit architectures does not properly...CVE-2004-0946EPSS 11.3%10.0 HighDecember 22, 2004
debian debmakeThe debstd script in debmake 3.6.x before 3.6.10 and 3.7.x before 3.7.7 allows local users to...CVE-2004-1179Fix available2.1 LowDecember 22, 2004
libtiff, apple mac os x, mac os x server +15 more +17 moreInteger overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows...CVE-2004-1307Fix available7.5 HighDecember 21, 2004
larry wall perlRace condition in the rmtree function in the File::Path module in Perl 5.6.1 and 5.8.4 sets read...CVE-2004-0452Fix available2.6 LowDecember 21, 2004
ibm aixUntrusted execution path vulnerability in the diag commands (1) lsmcode, (2) diag_exec, (3)...CVE-2004-1329Public exploit7.2 HighDecember 20, 2004
ultrix dxtermBuffer overflow in dxterm in Ultrix 4.5 allows local users to execute arbitrary code via a long ...CVE-2004-1326Public exploit7.2 HighDecember 20, 2004
htgetBuffer overflow in htget 0.93 allows remote attackers to execute arbitrary code via a crafted URL.CVE-2004-0852Fix available7.5 HighDecember 20, 2004
netbsdMultiple buffer overflows in NetBSD kernel may allow local users to execute arbitrary code and...CVE-2004-13747.2 HighDecember 18, 2004
microsoft windows media playerThe getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0...CVE-2004-1325Public exploitEPSS 15.7%5.0 MediumDecember 18, 2004
microsoft windows media playerThe Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute...CVE-2004-1324Public exploitEPSS 16.7%2.6 LowDecember 18, 2004
symantec brightmail antispamThe character converters in the Spamhunter and Language ID modules for Symantec Brightmail...CVE-2004-17685.0 MediumDecember 17, 2004
netbsdMultiple syscalls in the compat subsystem for NetBSD before 2.0 allow local users to cause a...CVE-2004-13232.1 LowDecember 16, 2004
linux kernel, redhat linux, fedora core +2 moreMemory leak in the ip_options_get function in the Linux kernel before 2.6.10 allows local users...CVE-2004-1335Public exploit2.1 LowDecember 15, 2004
No product listedInteger overflow in the ip_options_get function in the Linux kernel before 2.6.10 allows local...CVE-2004-13342.1 LowDecember 15, 2004
linux kernel, redhat linux, fedora core +2 moreInteger overflow in the vc_resize function in the Linux kernel 2.4 and 2.6 before 2.6.10 allows...CVE-2004-1333Public exploit2.1 LowDecember 15, 2004
cisco unity serverCisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded...CVE-2004-13227.5 HighDecember 15, 2004
asante fm2008 managed ethernet switchThe configuration backup in Asante FM2008 running firmware 1.06 stores the username and password...CVE-2004-13217.5 HighDecember 15, 2004
asante fm2008 managed ethernet switchAsante FM2008 running firmware 1.06 is shipped with a default username and password, which could...CVE-2004-13207.5 HighDecember 15, 2004
microsoft windows 2000, windows 2003 server, windows 98 +6 more +8 moreThe DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into...CVE-2004-1319EPSS 26.9%5.0 MediumDecember 15, 2004
gadu-gadu instant messengerInteger overflow in Gadu-Gadu allows remote attackers to cause a denial of service (disk...CVE-2004-12335.0 MediumDecember 15, 2004
gadu-gadu instant messengerStack-based buffer overflow in the code that sends images in Gadu-Gadu allows remote attackers to...CVE-2004-123210.0 HighDecember 15, 2004
gadu-gadu instant messengerDirectory traversal vulnerability in Gadu-Gadu allows remote attackers to read arbitrary files...CVE-2004-12315.0 MediumDecember 15, 2004
gadu-gadu instant messengerGadu-Gadu allows remote attackers to gain sensitive information and read files from the _cache...CVE-2004-12305.0 MediumDecember 15, 2004
gadu-gadu instant messengerCross-site scripting vulnerability in the parser for Gadu-Gadu allows remote attackers to inject...CVE-2004-12297.5 HighDecember 15, 2004
sugarcrm sugar salesThe install scripts in SugarCRM Sugar Sales 2.0.1c and earlier are not removed after installation...CVE-2004-12286.4 MediumDecember 15, 2004
sugarcrm sugar salesDirectory traversal vulnerability in SugarCRM Sugar Sales 2.0.1c and earlier allows remote...CVE-2004-1227Public exploit10.0 HighDecember 15, 2004
sugarcrmSugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to gain sensitive information via...CVE-2004-12265.0 MediumDecember 15, 2004
sugarcrmSQL injection vulnerability in SugarCRM Sugar Sales before 2.0.1a allows remote attackers to...CVE-2004-1225Public exploit10.0 HighDecember 15, 2004
mtrOff-by-one error in the mtr_curses_keyaction function for mtr 0.55 through 0.65 allows local...CVE-2004-1224Fix available4.6 MediumDecember 15, 2004
f-secure policy managerThe Management Agent in F-Secure Policy Manager 5.11.2810 allows remote attackers to gain...CVE-2004-1223Public exploit5.0 MediumDecember 15, 2004
darryl burgdorf weblibsweblibs.pl in WebLibs 1.0 allows remote attackers to execute arbitrary commands via shell...CVE-2004-122210.0 HighDecember 15, 2004
darryl burgdorf weblibsDirectory traversal vulnerability in weblibs.pl in WebLibs 1.0 allows remote attackers to read...CVE-2004-1221Public exploit5.0 MediumDecember 15, 2004
digital illusions battlefield 1942, battlefield vietnam +1 moreBattlefield 1942 1.6.19 and earlier, and Battlefield Vietnam 1.2 and earlier, allows a remote...CVE-2004-1220Public exploit5.0 MediumDecember 15, 2004
php arena pafiledbpaFileDB 3.1, when using sessions authentication and while the administrator logs on, allows...CVE-2004-12195.0 MediumDecember 15, 2004
ibex software remote executeRemote Execute 2.30 allows remote attackers to cause a denial of service (application crash) by...CVE-2004-12185.0 MediumDecember 15, 2004
hosting controller controllerHosting Controller 6.1 Hotfix 1.4, and possibly other versions, allows remote attackers to view...CVE-2004-1217Public exploit5.0 MediumDecember 15, 2004
burut kreedThe scripts that handle players in Kreed 1.05 and earlier allow remote attackers to cause a...CVE-2004-1216Public exploit5.0 MediumDecember 15, 2004
burut kreedKreed 1.05 and earlier allows remote attackers to cause a denial of service (server disconnect)...CVE-2004-1215Public exploit5.0 MediumDecember 15, 2004
burut kreedFormat string vulnerability in Kreed 1.05 and earlier allows remote attackers to execute...CVE-2004-1214Public exploit10.0 HighDecember 15, 2004
advanced guestbook guestbookCross-site scripting (XSS) vulnerability in index.php in Advanced Guestbook 2.3.1, 2.2, and...CVE-2004-1213Public exploit6.8 MediumDecember 15, 2004
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open